CVE

Id
50414  
CVE No.
CVE-2011-2502  
Status
Candidate  
Description
runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a module path is specified by a user for user-space probing, which allows local users in the stapusr group to gain privileges via a crafted module in the search path in the -u argument.  
Phase
Assigned (20110615)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
544957 50414 CVE-2011-2502 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=716476  View
544958 50414 CVE-2011-2502 CONFIRM:http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git;a=blob;f=NEWS;hb=304d73b1fea24af791f2a129fb141c5009eae6a8  View
544959 50414 CVE-2011-2502 CONFIRM:http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git;a=commitdiff;h=4ecaadf545a729bb3e5f01f6f019716d49815d9a  View
544960 50414 CVE-2011-2502 SECUNIA:45377  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34481 JVNDB-2011-004723 phpMyAdmin の libraries/server_synchronize.lib.php における PCRE e 修飾子を挿入される脆弱性 phpMyAdmin の Synchronize 実装の libraries/server_synchronize.lib.php は、正規表現を適切に引用しないため、PCRE e 修飾子を挿入され、その結果任意の PHP コードを実行される脆弱性が存在します。 CVE-2011-2507 50414 6.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004723.html  View